We already had a "SYN FIN" scan in the nmap wrapper; I added a "FIN SYN" scan. Nearly the same, but it uses the same semantics as the FIN scan (i.e. port is closed if we get a RST, open if we get no answer), while the first scan uses the SYN scan semantics (port is closed if we get a RST, open if we get an ACK) This works with Nmap 3.0